Supplier Management Manager

To own the end-to-end supplier lifecycle for the Group: bringing new suppliers on board safely, evidencing that they meet our regulatory, security and contractual obligations, and ensuring the services we pay for are delivered. The role is the owner of the Vanta platform as the single source of truth for supplier risk, contract management and renewals.

Suppliers in scope: Full Group third-party base, from critical outsourced services to tail spend.

Systems owned: Vanta (supplier & risk management), contract repository, renewals calendar

Frameworks: TSA obligations, ISO 27001, GDPR/data protection, sanctions & financial crime checks

Key stakeholders: Legal, Information Security, Risk & Compliance, Finance, service/contract owners

How success is measured*

• 100% of critical suppliers with current, approved due diligence on file.
• Zero contracts auto-renewing without a documented commercial review.
• Average supplier onboarding time under 10 working days, request to approved record.
• TSA and ISO 27001 supplier evidence available on demand, audit-ready.
• Vanta fully adopted as the single source of truth for supplier and contract data.
• Quarterly service reviews held for every critical contracted service.